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Abstract — This paper describes the synthesis of matrices with 
good correlation, from cyclic shifts of pseudonoise columns. 
Optimum matrices result whenever the shift sequence satisfies 
the constant difference property. Known shift sequences with the 
constant (or almost constant) difference property are: Quadratic 
(Polynomial) and Reciprocal Shift modulo prime, Exponential 
Shift, Legendre Shift, Zech Logarithm Shift, and the shift 
sequences of some m-arrays. We use these shift sequences to 
produce arrays for watermarking of digital images. Matrices can 
also be unfolded into long sequences by diagonal unfolding (with 
no deterioration in correlation) or row-by-row unfolding, with 
some degradation in correlation. 

I. Introduction 

Sequences with good auto and cross-correlation have many 
applications in modern communications, whilst radar, sonar 
and digital watermarking of images also requires arrays (matri- 
ces) with similar properties. Some sequences can be naturally 
folded into arrays, whilst arrays can always be unfolded into 
sequences. Here, we consider the synthesis of arrays with good 
correlation properties. We focus on arrays where each column 
is a cyclic shift of one pseudonoise (or impulse) column, or a 
constant column. The shift sequence of an array lists the cyclic 
shift of each pseudonoise or impulse column, and lists - for 
each constant column. A sequence is considered pseudonoise 
if its autocorrelation takes on two values, a high value at zero 
shift and a single low value for all other shifts. Such sequences 
have been studied extensively, because of their applications 
to communications and radar. The matrix auto and cross- 
correlations are summations of the auto and cross-correlations 
of the overlaying columns. For matrices constructed from the 
same column sequence, these are all autocorrelations of that 
column and hence are —1 or v (v is the column length) 
for pseudonoise columns and 1 or for impulse columns. 
The auto and cross-correlations are then determined by the 
numbers of matching columns. Shift sequences which result 
in or 1 matching column are particularly prized. A two- 
dimensional cyclic shift of a matrix by (k, I) is obtained by 
rotating the rows by k places to the right and each column 
by / places downwards. The correlation of two matrices is 
the list of the inner products of one matrix with all the two- 
dimensional cyclic shifts of the other matrix. In our context, 
the correlation of two matrices is calculated by counting the 
number of matching columns for each (k, I) shift. The paper 
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presents an analysis of matrices constructed by using shift 
sequences based on: polynomials, exponentials, logarithms and 
the naturally occurring shift sequences of m/GMW arrays. 

II. Polynomial Shift Sequences 

Consider a shift sequence calculated as a polynomial of 
order n > 1, ((fii(x) modulo p), with coefficients from Z p : 

(fii(x) — a n x n + a n _ia;" _1 + ... + aix 1 + a (1) 

When column labeled x=0,l,..., p-1, is cyclically shifted 
through <pi (x) places downwards, this describes apxp matrix 
A j. There are p 2 — 1 other matrices cyclically equivalent 
to A j. These are obtained by all two-dimensional non-zero 
shifts to matrix Aj. Horizontal shifts are equivalent to the 
transformation x' = x + k, whilst vertical shifts are achieved 
by the transformation ip'(x) — (f(x) + I where k and I are 
chosen from Z p . Shift polynomials which differ only in ao 
and/or a„_i describe matrices, which are cyclic shifts of each 
other. There are p n ~ x — 1 inequivalent matrices. 

A. Autocorrelation 

The autocorrelation for shift (k, I) is obtained from the 
number of matching columns: i.e. solutions of 



<pi(x) - ip'i(x') = 



(2) 



The above is a polynomial of degree at most n — 1 and this 
is an upper bound on the number of matching columns. For 
pseudonoise columns with peak autocorrelation of p and off- 
peak autocorrelation of —1, the off-peak matrix autocorrelation 
takes on values restricted to: — p, +l,p+2, 2p+3, (n—2)p+ 
(n — 1). The frequency of occurrence of each autocorrelation 
value depends on the number of distinct roots of the difference 
polynomial for the shift (k, I). The lowest meaningful value 
of n = 2 [1] results in three-valued matrix autocorrelation: 
p 2 , —p, +1. In case of a ternary Legendre column, with auto- 
correlation values of p — 1 and —1, the matrix autocorrelation 
values become: p(p — 1), 0, —p. The quadratic shift sequence 
is one which possesses the distinct difference property (DDP), 
in that all differences in the shift sequence taken a fixed 
distance apart appear exactly once. This is a result of the 
(linear) difference polynomial having exactly one solution for 
each (k, I) shift. Subsequent sections describe other known 



shift sequences with DDP, where each difference is allowed 
to appear at most once. 

B. Cross-correlation 

Consider another matrix, Aj built from identical column 
sequences, using the shift sequence: 

<p 2 {x) = b m x m + b m ^x m - x + ... + b 1 x 1 +b Q (3) 

The number of matching columns between the matrices is 
obtained by solving 

<p 2 (x)-<p' 1 (x') = (4) 

where x' and ip' are defined as above. The difference polyno- 
mial is of degree at most max(m,n), so this is an upper bound 
on the number of matching columns. 
Example 1 

A quadratic shift sequence is: 0,6,4,1,4,6,0 mod 7. A ma- 
trix built from this shift sequence using a ternary Legendre 
sequence column is shown below. The autocorrelation off- 
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peak values are 0, —p. Another matrix can be constructed 
from the quadratic shift sequence: 0,5,1,2,1,5,0. It is shown 
below, as well as its cross-correlation with the first matrix, 
which is constrained to 0,-(p-l),+(p-l). There are p - 1 
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cyclically distinct quadratic matrices, with the same bounds on 
all autocorrelations and cross-correlations. This construction 
is preferred where large numbers of matrices, with minimum 
interference are required. A disadvantage is low cryptographic 
security, owing to low linear complexity of the shift sequence. 
Quadratic shift sequence matrices can be punctured, columns 
inserted columns shortened or lengthened, with predictable 
results [4]. 

C. Column Sequences 

The required sequence length of p can be satisfied by a 
Legendre sequence, Hall sequence or binary m-sequence. 



III. Exponential Shift Sequence 

An exponential shift sequence, with p — 1 entries of the 
form g l , where g is any primitive root in Z p , has the distinct 
difference property [2]. There are 4>{p — 1) sequences, where 
(f> is the Euler Totient Function. The treatment in § §11, III, 
of exponential and logarithmic functions, as shift sequences, 
is an adaptation of that for Costas Arrays [3]. Consider two 
arrays constructed using common column sequences and the 
shift sequences: (fii(j) = g j and 922 (j) = h? , where g and h 
are primitive roots of Z p . Columns match whenever 

h j = g J+k + I (5) 

But h = g r where r G Z p and gcd(r,p-l)=l. The columns 
which match are solutions of 

gTj _ gj + k _ l = Q (6) 

Let X = gK Therefore 

X r - g k X -1 = (7) 

Equation (7) has at most r solutions. Hence, an upper bound 
on the number of matching columns is r. 

A. Autocorrelation 

Here r = 1 so the number of matching columns is: p — 
1,1,0. The matrix autocorrelation values are: p 2 —p, +2, 1 —p. 

B. Cross-correlation 

The best cross-correlation is achieved for r = —1. Then, 
equation (7) becomes: 

X- 1 -g k X -1 = or g k X 2 + X -1 = (8) 

Hence, an upper bound on the number of matching columns 
is 2. The matrix cross-correlation values are: p + 3, +2, 1 — p. 

C. Column Sequences 

The required sequence of length p can be any Legendre 
sequence, Hall sequence or some binary m-sequences. 

IV. Logarithmic shift 
Two types of discrete logarithms arise: 

1) index function giving rise to Legendre Shift Arrays 

2) Zech logarithm giving rise to Zech Shift Arrays 
The former applies to Z p , whilst the latter to GF(p m ) 

A. Legendre Arrays 

Let a pseudonoise sequence of length (p — 1) be shifted 
cyclically as a function of column number j: 

ip r (j) = r x indg(j), where r € 1, 2, ...,p — 1 (9) 

with g being a primitive root of Z p and ind g being the kO < 
k < p — 2, such that g k = j. Note that ip(j) is expressed mod 
(p-1). The column indices (j) of the array range from to 
p— 1, so the matrix has p columns with (p— 1) rows, with the 
first column being blank, since ind(0) is not defined. There 
are p — 2 sequences. For example, for p = 7, g = 3, the shift 
sequence is: -,0,2,1,4,5,3. 



B. Correlation 

An appropriate choice of g can make r = 1 for one of the 
shift sequences. For two shift sequences ip r {j) and ip\{j) the 
number of matching columns is the number of solutions of: 

r x indg(j) - ind g (j + k) - I = (10) 

or 

f~9 l 3+9 l k = (11) 

1) Autocorrelation: For autocorrelation, r = 1 and so, the 
number of matching columns is p — 1 for k = I = 0, 1 for 
fc ^ or for fc = 0, 1 ^ and I = 0, fc ^ 0. The matrix 
autocorrelation values are: (p — l) 2 ) for full match, +1 for 1 
column match, — (p — 1) for column match. These values 
can be altered, if the blank column is substituted by a constant 
column. 

2) Cross-correlation: The best result of an upper bound of 
2 columns matching is obtained for r = 2 or — 1. This occurs 
for pairs of sequences only. The matrix cross-correlation 
values are: p+1, + 1, — (p — 1). 

3) Column Sequence: A suitable column sequence for such 
a construction is any m-sequence over Z p and its mapping onto 
roots of unity S(i) = uj 9 , Schroeder [2,26.19], where g is a 
primitive root of Z p . uj — e~ is a primitive root of unity. 
Here p = 7. Multiples of this angle are shown. 
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C. Zech Arrays 

Logarithmic arrays of size (p m — 1) x (p rn — 1) can 
be constructed using column shifts determined by the Zech 
logarithm of elements of a Galois Field GF(p' m ). For the 
general (Golomb) construction, the shift sequence is 

<p{j) = lo g/3 (l - a?) (12) 

a and (3 are primitive elements of GF(p m ). 

The total number of distinct arrays is: ^ p m ^ ■ The special 

case of (3 = a is the Lempel construction. 

1) Correlation: Consider two shift sequences: 

<Pi(j) = iog^ 1 - al ) and ¥>2{j) = log 7 (l - V) (13) 
where 7 = /3 r and S = a s 

and gcd(r,p m — 1)= gcd(s,p m — 1) = 1. We can interpret r 
as a multiplier and s as a sampler or decimation. An upper 
bound on the number of matching columns is determined by 
the number of solutions of: 

\og fj {l- ai+ k )+l = log 7 (l-^') = r^pog^l-a"')] (14) 
so lo g(3 TrzgrrpF - -i and 1 - a^+ k = p~ l (l - a s ^)- r 



Finally (1 - a j+k ) r = /T'(l - a sj ) 
Once again, let a? = X. Therefore 

(i- a k xy = /r'(i- x s ) (15) 

(15) is a polynomial equation of degree max (r,s). 

2) Autocorrelation: r = s = 1, so the numbers of matching 
columns are: p — 1,1,0. 

3) Cross-Correlation: r = — 1, s = 1 orr = 1, s = —1 or 
r = 2,s=lorr = l,s = 2 once again result in quadratic 
forms and hence limit the number of matching columns to 
0,1,2. 

Example 2 A shift sequence of length 15 over GF (2 4 ) is: 
-,4,8,14,1,10,13,9,2,7,5,12,11,6,3. 

Another shift sequence is: 

-,8,1,13,2,5,11,3,4,14,10,9,7,12,6. 

The lower sequence could be obtained by decimation of the 
above sequence by 2 or multiplication of the entries by 2. The 
cross-correlation shows that 2 columns can match at most. 

4) Column Sequences: Any m-sequence/GMW sequence of 
length p m — 1 is suitable. 

V. Other Shift Sequences 
A. Shift Sequences from M-arrays 

An m-sequence of length p km — 1 can be written row-by- 
row as a matrix, such that all columns are constants or cyclic 
shifts of one short m-sequence of length p m — 1. This matrix 
can be described by a shift sequence and the column sequence. 
Formally, this shift sequence fj can be obtained from finite 
field theory [10]: 

fj = ind^Tr^a 1 )) (16) 

where Tr r r l n is the trace function, which takes the sum of 
conjugates (as defined in [11]). This shift sequence can be 
converted into a perfect shift sequence for two-dimensional 
matrices by the addition of an appropriate linear function [4]. 
Then, all differences appear equally frequently for all cyclic 
shifts of the shift sequence. Such shift sequences can be used 
to construct new matrices, by substituting the columns by other 
pseudonoise sequences. For example, an m-sequence of length 
120 (p 2 — l, with p = 11) can be written as an array of 10 rows, 
each of length 12. Each column of the array is an m-sequence 
of length 10, except for the single null sequence. The twelve 
columns are described by a shift sequence modulo 10. This 
shift sequence can be converted into a perfect shift sequence 
modulo 5, [4]: 3, 2, 2, 4,0, 3, -,3,0,4, 2, 2. This produces a perfect 
matrix, by using it to shift (cyclically) a ternary Legendre 

sequence of length 5: 0,1,-1,-1,1. The choice of a = f° r 
the entry a in the constant column adjusts the autocorrelation 
numbers to : 55 for zero shift, and for all other shifts, 
an example of perfect autocorrelation for the array and its 
diagonal sequences. 
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B. Hyperbolic Shift Sequences 

Hyperbolic sequences have been used for designing Fre- 
quency Hop Patterns [8]. They can also be applied to construct 
matrices of the type described in this paper. 

VI. Window Property 

A column sequence is said to have the nxl strong window 
property if each possible n'tuple occurs and occurs once only, 
as n consecutive symbols in the column. The weak window 
property is that no window of n symbols appears more than 
once. Each m-sequence as a column sequence in this paper 
has the weak window property. The shift sequences discussed 
in this paper also have the window property: the quadratic 
shift sequence mod p has the strong window property, whilst 
all the others have the weak window property. For each shift 
sequence in this paper, each doubleton ip(j+k)) appears 

at most once. Hence, an array constructed using such a shift 
sequence, with a column sequence having the weak nxl 
window property, has the weak n x 2 window property, for 
any fixed separation of the two window columns [7]. Arrays 
with window properties are useful as registration patterns in 
structured light for medical imaging. 

VII. Applications 

A. Watermarking 

Matrices have been used as watermarks in various images 
in spatial and transform domains [5]. Entries with real values 
are preferred, although matrices over complex numbers have 
also been embedded as watermarks [6]. 
To keep watermarks unobtrusive, and immune to correlation 
type attack, the matrices need to be as large, and as efficient 
as possible (least zero-value entries), with low off-peak 
autocorrelation. This makes use of the maximum processing 
gain. All matrices described in the previous sections satisfy 
these criteria. Some applications require additional immunity 
to cryptographic attack. Since most attacks involve linear 
processing, linear complexity is a good measure. Matrices 
constructed using exponential, logarithmic and hyperbolic 
shift sequences, applied to high linear complexity column 
sequences e.g. GMW, Bent sequences etc provide this feature. 
Other applications require large information storage in the 
watermark. Typically, information is stored in the value of 
the cyclic shift of the matrix. Information capacity can only 
be increased by combining more matrices with low mutual 
cross-correlation. The polynomial shift sequence appears 
to be the only one capable of this. The example of this 
feature is illustrated in the figures below. Figure 1 shows the 
result of adding 4 127 x 127 matrices constructed using 4 
different quadratic shift sequences and the same m-sequence 



column. The matrices all have different cyclic shifts, each 
one contributing a bit word to the information content. Figure 
2 shows the original image. Figure 3 shows the watermarked 
image, where the watermark is just visible. Figure 4 shows 
the result of correlating the watermarked image with the four 
matrices, showing 4 distinct peaks, one for each array. Such 
a composite watermark can carry almost 4 ASCII characters. 
The performance of such watermarks is much better for full 
scale images, using RGB and can be extended to video. 



B. Communications 

Modern wireless communications require large sets of se- 
quences with good auto and cross-correlation. Preferably, such 
sequences should be binary (+/ — 1) or ternary (+/ — 1,0) and 
have a high linear complexity. Our matrices can be unfolded 
to yield such sets, and many satisfy the above criteria. The 
unfolded sequences can be utilized in CDMA. We consider 
two methods of matrix unfolding. 

1) Diagonal Unfolding: Matrix A = {c^.j} of T columns 
each of length v with gcd(v, T) = 1 can be unfolded 
along a diagonal Sj = {a qijri } where gcd(v, q) = 1 and 
gcd(r,T) = 1. This is because the diagonal passes through 
every entry in the matrix exactly once, before repeating. Each 
one-dimensional cyclic shift of the diagonal is equivalent to a 
two-dimensional (k, I) cyclic shift of the matrix. Therefore, 
correlation values for a matrix are equal to those of the 
diagonal sequence. The above applies to exponential and 
logarithmic shift sequences, because gcd(p, (p— 1) = 1. Such 
matrices can be unfolded to yield new sequences of length 
p 2 — p directly along diagonals of such matrices [7], without 
changing the correlation numbers. 

2) Row-by-Row Unfolding: Any matrix A = {dij} of T 
columns each of length v can be unfolded row-by-row into a 
sequence Si + jT = {a>i,j} Here, there is no correspondence be- 
tween cyclic shifts of the long sequence and two-dimensional 
matrix shifts. This kind of unfolding results in a doubling of 
the upper bound on the number of matching columns [9]. The 
worst case correlation are also doubled (approximately). 

VIII. Conclusion 

This paper shows how matrices with good two dimensional 
autocorrelation and cross-correlation can be synthesized by 
using cyclic shifts of pseudonoise columns. These sequences 
of shifts (shift sequences) are derived from finite fields using 
mappings from number theory. The properties of matrices 
constructed by shifts of a pseudonoise sequence based on 
polynomial type shift sequences are summarized in Table 
1 below. Autocorrelation and cross-correlation entries refer 
to numbers of matching columns. L refers to Legendre 
sequence, H to Hall sequence and M* to M/GMW sequence 
of length 2™ — 1 which is a prime number (Mersenne Prime). 
M 1 * refers to non-binary M/GMW sequence. 
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